How to track users according to GDPR and other privacy regulations

This is a general guide on how to set up tracking that follows GDPR and other privacy regulations. For full information, we recommend consulting with a legal professional.

WP Full Picture lets you track your visitors according to GDPR and other privacy regulations. Follow these steps to learn, how to set it up.

Step 1. Use the consent banner in the right mode

Your consent banner controls how and when tracking tools track your visitors.

Step 2. Block 3rd party tracking tools

WP Full Picture makes sure that all the tracking tools that you install with its modules are loaded according to your privacy settings.

However, your site can have multiple other tracking tools – and you may not even know about them. Let me tell you how to find them and what to do with them.

Move tracking scripts to “Custom integrations” module.

If you have tools installed with code snippets, then you should move them to the “Custom integrations” module. Tools installed with this module will automatically load according to your privacy settings and user choices.

To find and block other tracking tools, you should use WP FP’s page scanner.

Scan your site for other tracking tools

WP Full Picture comes with built-in page scanning feature that will help you find other tools that track your visitors.

To access the scanner:

  1. Enable Setup Helper in the top menu
  2. Go to front-end of your website
  3. Click WP FP icon in the left menu
  4. Click the “Page scan” button
setup helper front end icon

The scanner will scan your pages for trackign scripts, iframes and other elements. Finally, it will make several reports that you should send to your AI tool, e.g. Google Gemini.

The AI will process the information from the files and tell you if it found any tracking scripts you have to block, and how to do it.

Block tracking tools

The AI will tell you exactly how to block tracking tools on your site, so this information is only for the sake of completeness.

  • You can block tracking tools from the Consent Management > Tracking blocking page.
  • You can block iframes with embedded content from Consent Management > Iframe placeholders page
  • You can block dynamic iframes (loaded dynamically to the page without refresh) using one of the manual methods.
iframe enabled 1

Step 3. Replace Google Fonts

Google Fonts can collect your visitor’s IP addresses, thus breaking some privacy regulations (mostly in Europe).

WP Full Picture gives you a simple “Safe fonts” module, which you can use to replace them, but it may not work for all websites.

Other ways to replace Google Fonts are:

  1. to switch them to local fonts (files kept on your server) in your theme options and/or plugin options
  2. or use a plugin like OMGF

You can check if these methods work using a fonts checker website service or checking it in your browser’s console (“sources” tab).

Step 4. Consult GDPR Setup Helper

After you enable the consent management module, you will have access to GDPR Setup Helper – a special screen with up-to-date information what you should do to comply with GDPR.

You can access it, simply by clicking “Help” in the top menu and “GDPR setup helper”.

Access it regularly, while setting up tracking.

And finally… Have a solid privacy policy

Privacy regulations in different countries require you to disclose different levels of information about how you track your visitors, what information you collect, what you do with this data and what your visitors can do about it.

From my tests, no free generator of privacy policies includes all the important information. If you have a business, I strongly recommend investing in professional help or at least a good that is often updated.

I also recommend you add the clauses about the use of WP Full Picture and ConsentsDB (if you use it) to your website.

Subscribe
Notify of
guest
0 Comments
Oldest
Newest Most Voted